Vulnerability Reportcaddy:2.11.6-alpine

This image is acceptable for production, but remediating the identified vulnerabilities is recommended to reduce the attack surface. It has 19 exposed-surface findings and 1 post-exploit-only finding, with an exposed max severity of 6.38 and exposed_count_ge7 of 0. The most notable are CVE-2026-78669 and CVE-2026-97031, both denial-of-service issues reachable through Caddy's default HTTP/2 and TLS handling. Remote clients could cause CPU exhaustion, memory exhaustion, or service slowdown, but the findings do not indicate code execution or data exposure. Because the image is an Official Docker image pinned by digest, trust is high, yet the reachable DoS paths still warrant remediation.